Security Principles
The CIA triad and core concepts, risk management, the categories and types of security controls, and governance and ethics.
The CIA triad — Confidentiality, Integrity, Availability — is the foundation of information security, often extended with authenticity and non-repudiation. Privacy protects personal data.
Identity is proven with authentication using one or more factors: something you know (password), something you have (token), and something you are (biometric); combining factors is multi-factor authentication (MFA). Risk management weighs threats, vulnerabilities, and assets: common treatments are avoid, mitigate, transfer, and accept risk, prioritized by likelihood and impact.
Using a password plus a one-time code from a phone app is an example of what?
Which is a valid risk treatment option?